Operations | Monitoring | ITSM | DevOps | Cloud

How Puppet Helps with System Hardening

You've identified the risks, now it's time to fix them. In this walkthrough, see how Puppet helps you turn the results of your System Hardening Assessment into real-world improvements across your environment. Learn how to remediate common security and compliance gaps, enforce secure configurations at scale, and continuously maintain hardened systems without relying on manual effort.

Puppetlabs Modules Now Have Tiered Review Cycles

If you've been watching the Puppetlabs namespace on the Forge (or waiting on a pull request you opened) you've likely noticed that the pace of inclusion of community pull requests and fixes into the module releases has slowed over the last several cycles. That isn't how we want to serve the community that built these modules with us. The team has been reviewing how we can improve and this post is our commitment to do better. Here are the steps we're taking now: Back to top.

Driving Value from Puppet Metrics: Puppet Observability Data Connector

The Puppet Observability Data Connector is a premium Forge module included with Puppet Enterprise Advanced (PEA). This module provides a deeper dive into your Puppet agent reports. Visualizing these metrics gives you a great way to identify what is healthy and unhealthy in your environment.

Walkthrough: Puppet System Hardening Assessment

Is your infrastructure as secure as you think it is? In this walkthrough, see how aSystem Hardening Assessmenthelps organizations identify security gaps, uncover configuration risks, and prioritize remediation efforts across critical systems. You'll learn how teams can evaluate their environment against security best practices, gain visibility into potential vulnerabilities, and take actionable steps to strengthen their overall security posture.

Why Multi-Agent AI Workflows Need a Control Plane

AI is transforming how infrastructure and platform teams design, deploy, and operate systems. As organizations move from experimentation to production, a clear pattern is emerging. AI can decide what should change, but it cannot safely control how those changes are executed. This creates a gap in modern architectures. That gap is filled by a control plane. That control plane already exists in Puppet Enterprise Advanced.

AI Found 18 OpenSSL Vulnerabilities. Now Your Team Has to Patch Them.

On June 9, 2026, the OpenSSL project released patches covering 18 vulnerabilities across its supported releases. The headline flaw, CVE-2026-45447, is rated high severity and has the potential for remote code execution. Not too long ago, a security advisory with 18 vulnerabilities would have been routine. Microsoft’s Patch Tuesday provided a predictable cycle, and organizations operated with the expectation of a meaningful remediation window. That model is under pressure.

How Teams Work Faster with Puppet AI

Can AI actually improve infrastructure operations? Without sacrificing control? In this webinar, see how teams use Puppet AI to understand infrastructure with natural language, reduce operational effort, and move from insight to action faster—all within trusted automation workflows. Watch a live demo of detecting and mitigating a real-world vulnerability, and learn how context-aware AI helps teams scale safely with built-in governance.

Policy as Code Tools & Examples to Make Better Infrastructure Easier, Anywhere

You’re scaling your IT infrastructure so you can do more — deploying across clouds and data center, adding servers, coding like crazy. Great! But how do you keep it all from falling apart? Policy as code is an approach to managing IT that strategically leverages infrastructure as code (IaC) and compliance as code to manage consistent policies across complex IT environments. Sounds perfect, right?